
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: QxgUjNHrf8FZb4vY2tSIyplC1A5y8oKNEDMex8fhbyM=
Subject key identifier: 16:E3:04:53:73:17:C9:E2:6B:52:6D:A6:C2:BE:37:A3:49:F2:CF:63
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01A0B79B86383F07E42D814DFBF2ACDC306B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 11EB
Signing time: Sat 19 Sep 2026 03:00:17 +0000
Manifest this update: Sat 19 Sep 2026 03:00:17 +0000
Manifest next update: Sun 20 Sep 2026 03:00:17 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: xXP3ZepKqNomPMFJqC6Gn5vubEE0aXQ0gdn8aTm9CB4=)
2: hCRU042AoO-wp1TNEdYzfOG7kyM.roa (hash: 458hq105l3Yhrg7POKX+Z5+Z9IN5XlkejgNFXz79fUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:9b:86:38:3f:07:e4:2d:81:4d:fb:f2:ac:dc:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Sep 19 03:00:17 2026 GMT
Not After : Sep 20 03:00:17 2026 GMT
Subject: CN=16e304537317c9e26b526da6c2be37a349f2cf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:df:45:c6:35:87:82:05:f8:a9:8a:66:d5:
5b:05:d7:f3:b4:91:96:35:2f:3b:9e:b3:ee:fe:af:
11:12:d7:47:62:ef:f9:09:01:c9:a3:67:75:4c:5e:
6d:e8:77:cc:56:f6:a2:56:31:ad:ed:36:90:19:da:
ae:3a:01:ee:24:f5:4c:4e:60:25:c6:f5:c9:1f:db:
a1:cc:f2:4d:81:95:21:83:c0:86:9c:21:26:22:5a:
ce:cc:ef:47:59:43:56:68:4f:ad:d0:cc:4d:4b:5f:
05:05:2f:8b:f5:e6:12:b5:d1:11:15:26:97:32:15:
f0:ff:fb:5b:a9:02:6a:9b:c9:b9:db:9a:89:74:e7:
b6:de:3e:69:15:e5:b6:10:75:0d:7e:d3:d1:4e:63:
9a:3e:22:39:fa:f8:15:b3:0b:8d:91:b0:e1:3d:17:
a2:df:29:f8:6a:3a:f4:10:47:e3:e2:6a:f5:3a:d4:
0d:bd:4a:ac:64:48:86:86:ee:57:b7:0c:46:a8:50:
71:26:b3:45:a3:c5:2b:4e:bb:7a:72:cf:61:c6:e2:
3d:c9:18:3e:8b:bd:e8:31:f8:61:78:69:4f:86:18:
2e:d4:d1:18:8e:14:d7:3a:87:a8:ba:99:d4:2d:cc:
f7:3b:fa:29:56:7e:51:8c:a8:d1:15:c4:7f:0b:2e:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:04:53:73:17:C9:E2:6B:52:6D:A6:C2:BE:37:A3:49:F2:CF:63
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:da:ac:a5:0b:83:b0:23:a6:13:22:20:6f:59:8e:04:9d:b4:
f9:d6:cc:4a:5c:9a:11:6f:e0:f0:d4:d6:c5:40:1b:d5:50:ed:
8b:d5:16:68:03:eb:90:a5:f2:a1:c4:55:bf:9c:92:cd:86:c4:
84:bc:65:c7:ad:6e:cd:cd:9b:e4:35:0f:8f:c7:4e:1a:46:28:
a2:71:46:a4:ba:f2:dc:6a:12:8d:9a:ef:11:0f:29:fc:f3:fc:
62:4d:10:7a:17:7a:3c:db:14:21:e9:d8:2a:58:4a:65:bc:55:
b5:59:d0:9d:b5:e2:f2:23:eb:c7:b3:cb:42:79:2c:81:7e:23:
85:0c:3b:fb:9d:1b:65:7a:ac:37:11:50:1b:83:a4:dd:00:99:
0c:1c:1e:ba:8a:42:9a:ff:6b:65:51:f9:a3:e5:d3:9d:98:71:
84:c6:99:10:3c:e7:92:3b:da:a8:25:7f:53:56:4e:34:9f:75:
14:75:5b:e5:e8:6d:63:fa:6e:e5:83:b9:ac:d5:5e:5c:9c:2e:
0c:e9:a1:ab:b9:74:c7:8d:3f:d8:d2:21:48:d2:67:37:e6:46:
89:16:dd:bd:70:6c:1c:5e:f1:01:c4:76:df:ef:e0:90:11:b4:
48:b4:b0:a3:35:d1:62:56:1f:e6:df:04:4a:f3:a1:f3:71:23:
c5:9e:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:56:47 2026 by rpki-client